Privacy Policy

uploadrequest.app is a file collection service operated by uploadrequest.app. We provide tools that allow professionals to request and receive files from clients and contacts without requiring those contacts to create an account.

If you have any questions about this policy, contact us at hello@uploadrequest.app.

For account holders (requestors):

• Name and email address (when you sign up or via Google OAuth)
• Profile picture (if provided by Google)
• Upload request data you create (titles, messages, settings)
• Notification and plan preferences
• Log data: IP address, browser type, pages visited, timestamps

For file uploaders (contributors):

• The files you upload
• Basic request metadata (file name, size, upload timestamp)
• We do not collect your name, email, or any personal details — no account is required

• To provide and operate the service
• To send you notification emails about uploads and request activity
• To send automated reminder emails to upload recipients (on your instruction)
• To improve the product and fix bugs
• To comply with legal obligations

We do not sell your data to third parties. We do not use your data for advertising.

Files uploaded through the service are stored in encrypted cloud storage (DigitalOcean Spaces, S3-compatible). Files travel directly from the uploader's browser to storage using pre-signed URLs — they never pass through our application servers.

All data is encrypted in transit (TLS 1.3) and at rest (AES-256). Only the account holder who created the request can access the uploaded files.

Deleted files are permanently removed from storage. We do not retain backups of user-deleted files.

We send transactional emails to account holders: upload notifications, reminder digests, and account-related messages. You can control notification preferences from your account settings.

When you use the "Send Email" feature to invite a contributor, we send them a single upload invitation email from hello@uploadrequest.app. If you configure automated reminders, we send follow-up emails at the interval you set until they upload or the request expires.

We share data only with:

• DigitalOcean — file storage infrastructure
• Forward Email — email delivery (SMTP)
• Google — OAuth sign-in (if you choose to use it)

We do not share your data with any other third parties except where required by law.

We retain your account data for as long as your account is active. Upload requests and associated files are retained until you delete them or your account is closed.

You can delete individual requests, files, or your entire account at any time. Deletion is permanent and irreversible.

Depending on your location, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Object to or restrict processing of your data
• Data portability

To exercise any of these rights, email us at hello@uploadrequest.app.

We use session cookies to keep you logged in. We do not use tracking cookies, advertising cookies, or third-party analytics cookies. No cookie consent banner is required because we only use strictly necessary cookies.

We may update this policy from time to time. When we do, we will update the "Last updated" date at the top of this page. For significant changes, we will notify account holders by email.

For any privacy-related questions or requests, contact us at hello@uploadrequest.app.